Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/b6b1fc3c-48b0-3df0-8d5e-b8dfcf945d14.roa
File:                     b6b1fc3c-48b0-3df0-8d5e-b8dfcf945d14.roa (raw, json)
Hash identifier:          uWzGqDHhm9i5njMI2Gvy2jsF5fNdI8Re//59AUqlNu8=
Subject key identifier:   52:F1:1C:0D:86:A6:B5:20:87:FF:25:93:39:90:22:67:85:17:A4:DF
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       010D0C9F4328576D51CC73C042CFC1735C8624A1
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/b6b1fc3c-48b0-3df0-8d5e-b8dfcf945d14.roa
Signing time:             Fri 17 Jul 2020 11:26:01 +0000
ROA not before:           Fri 17 Jul 2020 04:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     29016
IP address blocks:        159.182.72.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:5c:86:24:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jul 17 04:00:00 2020 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=4be2b895-bba8-4361-9aaf-a59929a9144d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:1a:02:29:5b:7f:00:e3:1f:fc:ed:19:1a:
                    19:76:7e:71:72:3e:84:b7:df:18:60:e6:71:d2:0b:
                    7b:ae:b1:26:d5:a6:26:41:f2:5f:81:2f:eb:b5:27:
                    ee:6c:51:1d:37:07:49:7d:ac:97:d8:f9:e8:fc:45:
                    b3:91:5d:2a:d3:0c:8a:68:e4:a2:fa:13:9c:7b:c0:
                    e1:78:b4:5c:67:79:50:2d:59:a1:1d:7e:b6:62:7b:
                    da:3a:8c:fa:19:f9:bf:b2:49:eb:9d:84:22:ba:2d:
                    33:21:dc:fe:21:37:6a:c1:b1:ce:b1:32:25:cb:19:
                    34:9e:6a:1c:c6:cb:c8:09:4e:96:83:11:45:31:10:
                    f1:37:ba:04:f9:23:a9:df:46:2d:0e:62:e4:cc:2a:
                    b3:e1:17:c6:5e:78:89:2a:d2:a3:01:3c:68:6e:20:
                    27:71:0f:83:2b:b6:3b:c2:15:5c:8f:49:4d:f7:84:
                    e3:62:ee:6d:7f:25:08:67:61:2d:e7:7b:7a:64:26:
                    c7:50:97:6f:f0:a3:ab:e4:ee:86:7a:a6:dd:fc:1b:
                    ec:ff:a8:5a:91:f7:8b:9f:28:e5:ca:8b:74:34:b6:
                    00:2e:d7:a9:43:b7:a2:c0:cc:94:2a:0d:2c:5e:b6:
                    d6:44:8c:d1:87:58:94:2e:d8:ae:85:82:88:5b:a6:
                    d9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F1:1C:0D:86:A6:B5:20:87:FF:25:93:39:90:22:67:85:17:A4:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/b6b1fc3c-48b0-3df0-8d5e-b8dfcf945d14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a3:1c:6d:21:19:6a:6b:2c:b6:0e:66:4a:2f:e6:39:96:5f:
         88:0a:c9:f6:39:4d:4c:a5:df:6d:60:81:f9:7d:56:d5:6d:5e:
         f9:89:df:b3:c9:27:bb:f8:13:bf:52:45:20:55:70:63:96:82:
         ca:17:38:71:fc:83:af:bc:70:1a:c9:5d:27:ce:8d:d1:0d:b6:
         cf:b2:14:07:90:2b:44:71:2e:cb:22:b7:99:f2:6b:88:48:b9:
         d5:08:1b:e6:fd:8a:a9:52:af:54:32:8b:b7:cd:ac:a8:87:d4:
         98:80:02:96:b4:70:5a:83:70:f2:2d:b6:74:d4:fc:89:fd:b8:
         2f:05:24:b4:ba:2e:24:df:4c:77:b1:03:43:44:83:fe:ee:db:
         40:4c:58:73:99:98:ee:70:0a:01:a1:8a:0c:8d:9b:13:45:fc:
         99:0f:17:73:49:7a:39:d8:05:41:96:69:d9:ef:1f:fb:dc:40:
         bb:70:92:8a:2f:77:67:07:59:8f:52:33:73:19:53:4f:4b:3a:
         2e:06:5a:f0:6f:a8:87:59:15:59:e9:95:4e:52:8b:0e:57:22:
         49:14:12:ff:be:d5:0c:6f:b4:c4:a1:01:67:05:db:30:6b:75:
         a9:bc:88:0e:a8:75:5c:3f:74:2d:43:9a:c2:ab:4e:70:ae:01:
         21:86:11:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----